PyPI's New Archival Feature Closes a Major Security Gap